Analysis
-
max time kernel
120s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240611-en -
resource tags
arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system -
submitted
12/06/2024, 23:02
Static task
static1
Behavioral task
behavioral1
Sample
4b448b4c0b63dcc7989028c61fff0640_NeikiAnalytics.dll
Resource
win7-20240611-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
4b448b4c0b63dcc7989028c61fff0640_NeikiAnalytics.dll
Resource
win10v2004-20240611-en
0 signatures
150 seconds
General
-
Target
4b448b4c0b63dcc7989028c61fff0640_NeikiAnalytics.dll
-
Size
795KB
-
MD5
4b448b4c0b63dcc7989028c61fff0640
-
SHA1
121007889e596df916ade507dd16f2e7c2340952
-
SHA256
38dc299641fde10dc07f19cb0eb43877b2b31e835c975367b5f475e58e01a935
-
SHA512
1b67fd0ebb965a4ea3f0d175820d78051d6c89dbdb1f709e8ea53ee4d35399543c5e6cf1f468541e4caa89c00b8c7df570fd02173944b0cb4ab8008db8dfbfa2
-
SSDEEP
24576:NYGCAJas0OIsXrtaVeXLuFDM7bBSL2qiKON1WET4wms/KeUXyoIC+sGuO5EbGyr9:NY8Jas0OIsXrtaVeXLuFDM7bBSL2qiKZ
Score
1/10
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 2972 wrote to memory of 2992 2972 rundll32.exe 28 PID 2972 wrote to memory of 2992 2972 rundll32.exe 28 PID 2972 wrote to memory of 2992 2972 rundll32.exe 28